Privacy Policy for R&S Flavour

1. Introduction

Welcome to R&S Flavour ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") available on the Apple App Store and Google Play Store.

By downloading, installing, accessing, or using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our App.

2. Information We Collect

2.1 Information You Provide to Us

Account Registration

• Name: First name and last name
• Email Address: For account identification and communication
• Phone Number: Contact information for order delivery and customer support
• Address Information: Street address, city, and postal code for order delivery
• Password: Securely hashed and encrypted password for account security

Social Authentication

If you choose to sign in using Google Sign-In or Apple Sign-In, we collect:

• Email address (provided by the authentication provider)
• Display name
• Profile photo (if provided)
• Unique identifier from the authentication provider (Google UID or Apple ID)
• Phone number (if provided and authorized)

Order Information

• Order details (products, quantities, toppings, sauces)
• Delivery preferences
• Order history and status
• Payment information necessary for transaction processing

2.2 Automatically Collected Information

Device Information

• Device type (iOS or Android)
• Operating system and version
• Device identifiers
• Network information

Usage Information

• App usage patterns and interactions
• Features accessed and pages viewed
• Cart contents and preferences
• Language preferences

Location Information

We do not actively collect your precise geolocation. However, address information you provide (street address, city, postal code) is used for delivery purposes.

Push Notifications

• Firebase Cloud Messaging (FCM) tokens
• Device platform information
• Notification preferences and engagement data

2.3 Payment Information

• We use Stripe to process payments. Payment card details are never stored on our servers.
• We collect payment amounts, currency, and transaction identifiers to process your orders.
• Payment methods are handled securely by Stripe.
• Billing information such as name and address may be collected for records.

Note: We do not store, process, or have access to your full credit card numbers. All payment card data is handled by Stripe in compliance with PCI DSS standards.

2.4 Data Stored Locally

• AsyncStorage (React Native) for caching app data, cart contents, and user preferences
• Redux Persist for maintaining application state across sessions

This local storage includes authentication tokens, cart contents, menu data, and preferences.

3. How We Use Your Information

3.1 Service Provision

• Process and fulfill food orders
• Communicate order status and delivery updates
• Provide customer support
• Authenticate your identity and manage your account

3.2 Communication

• Send push notifications regarding order status and promotions
• Respond to customer service requests
• Send account-related notifications

3.3 Payment Processing

• Process payments for orders
• Verify payment transactions
• Prevent fraud and ensure transaction security

3.4 App Improvement

• Analyze app usage to improve user experience
• Fix bugs and technical issues
• Develop new features and services

3.5 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and protect our rights
• Enforce our terms of service

4. Third-Party Services and Data Sharing

4.1 Firebase (Google)

Used for authentication, push notifications (FCM), and Cloud Firestore storage.

Data Shared: User ID, email address, FCM tokens, device platform information

Privacy Policy: firebase.google.com/support/privacy

4.2 Stripe

Used for secure payment processing.

Data Shared: Payment amounts, transaction metadata, customer identifiers

Privacy Policy: stripe.com/privacy

4.3 Google Sign-In

Used for authentication.

Privacy Policy: policies.google.com/privacy

4.4 Apple Sign-In

Used for authentication.

Privacy Policy: apple.com/privacy

4.5 Backend API Services

All user account information, order data, and authentication tokens are transmitted to and stored on our backend servers at https://nestapi.rsflavour.com.

4.6 Expo (Development Platform)

Used for app updates and performance monitoring.

Privacy Policy: expo.dev/privacy

4.7 Data Sharing with Other Parties

We do not sell, rent, or trade your personal information. We may share your information with service providers, comply with legal requirements, or during business transfers with notice.

5. Data Security

• Encryption of data in transit via HTTPS/TLS
• Secure storage with encryption and access controls
• PCI DSS Level 1 compliant payment processing through Stripe
• Password hashing and secure authentication
• Limited access to personal data on a need-to-know basis

No method of transmission over the Internet or electronic storage is 100% secure. We strive to protect your data, but absolute security cannot be guaranteed.

6. Data Retention

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and maintain records.

• Account Data: Retained while your account is active and for a reasonable period after deletion.
• Order History: Retained for legal and accounting purposes (typically 7 years).
• FCM Tokens: Retained while your account is active; deactivated upon account deletion or logout.
• Payment Records: Retained per financial regulations and Stripe policies.

7. Your Rights and Choices

7.1 Access and Portability

You may request access to and a copy of your personal data.

7.2 Correction and Update

Update or correct your information through the App or by contacting us.

7.3 Deletion

Request deletion of your account and personal data, subject to legal requirements.

7.4 Opt-Out Options

• Disable push notifications via device settings.
• Manage location permissions via device settings.
• Opt out of promotional communications.

7.5 Account Management

Update personal details through the App or contact support to delete your account.

7.6 California Privacy Rights (CCPA)

California residents have the right to know, delete, opt-out of sale (not applicable), and receive non-discriminatory treatment.

7.7 European Privacy Rights (GDPR)

EEA users have rights to access, rectify, erase, restrict, object, and port data, as well as lodge complaints with authorities.

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided information, please contact us for removal.

9. International Data Transfers

Your information may be transferred to servers outside your country. We implement safeguards such as standard contractual clauses and legal requirements for protection.

10. Permissions Requested

Android Permissions

• INTERNET
• READ_EXTERNAL_STORAGE
• WRITE_EXTERNAL_STORAGE
• SYSTEM_ALERT_WINDOW
• VIBRATE

iOS Permissions

• Network Access
• Push Notifications
• Storage Access

Permissions are requested only as necessary. You can manage them via device settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in practices, technology, or legal requirements. We will notify you by posting updates in the App, changing the "Last Updated" date, and providing in-App notices where appropriate.

12. Contact Us

If you have questions or requests, please contact:

R&S Flavour
Email: Info@rsflavour.com
Website: https://rsflavour.com/en

For California Residents: Contact us to exercise CCPA rights.
For EU Residents: You may lodge a complaint with your local data protection authority.

13. Additional Information

13.1 Cookies and Tracking Technologies

We use local storage technologies (AsyncStorage, Redux Persist) for functionality. We do not use traditional cookies.

13.2 Do Not Track Signals

Mobile apps do not respond to "Do Not Track" signals. Manage privacy settings through your device.

13.3 Links to Third-Party Services

Our App may link to external sites. We are not responsible for their privacy practices. Please review their policies.

14. Consent

By using the App, you consent to:

• The collection and use of information as described.
• The transfer of your information to our servers and third-party service providers.
• The processing of your personal data for the outlined purposes.

If you do not consent, please discontinue use of the App.